Microsoft SP2 upgrade impacts manufacturers

Long troubled by security holes, Microsoft recently released an upgrade to the Windows XP client operating system that some say may ignite as many issues as it was meant to resolve. Introduced in mid-August, the upgrade—named SP2 (Service Pack 2)—adds new features and changes many default settings that customers have taken for granted.

While the vast majority of XP users are found in commercial markets, it's also estimated that 70 percent to 90 percent of plant-floor applications run on Microsoft operating systems.

The recent upgrade has drawn plenty of attention, according to Dedham, Mass.-based ARC Advisory Group VP Bob Mick. "We've been involved with Microsoft and end users about SP2 and other security issues," he says.

Among the changes, SP2 beefs up the existing Windows Firewall; adds a new Security Center screen that consolidates the ability to activate the Windows Firewall, automatic Windows updates, and antivirus protection monitoring; and changes default settings to a number of Windows features such as downloading ActiveX Controls.

However, while SP2 strengthens Windows security, it won't replace third-party products from providers such as Symantec, McAfee, or Zone Labs, which offer broader functionality. For instance, the Windows Firewall lacks the ability to control outbound traffic provided by third-party products. Furthermore, SP2 doesn't guard against threats such as spyware or adware, which can monitor or hijack the operations of a PC. Nor does it prevent Outlook Express from being commandeered by a virus or worm to send out e-mail spam.

The question, according to ARC's Mick, is whether the new changes could break certain applications upon which manufacturers already rely. For instance, under SP2, applications seeking remote network access to a Microsoft SQL Server database will not be able to connect unless the default setting is changed. According to Microsoft's SP2 support Web site ( http://support.microsoft.com/default.aspx?kbid=842242) similar problems could afflict popular applications, such as recent versions of AutoCAD, along with remote access programs from WRQ, IBM, Computer Associates, and Symantec. "By closing down ports and firewalls on the PC, SP2 will generate a very, very long list of software suppliers that will be affected," says Mick. "Any ISV that supports XP must pay attention to this," he concludes.